José Valim 015c74e734 Use message verifier in cookies. Previous implementation allowed brute force attacks by cookies. Even though it is impossible for the brute force attack to succeed, the current implementation blocks the attacker even before hitting the database.		2010-03-31 13:31:45 +02:00
..
controllers	Initial work on making the authentication stack more flexible.	2010-03-29 16:13:19 +02:00
encryptors	Fixed some Ruby 1.9 issues/bugs.	2010-01-21 16:06:19 +08:00
hooks	Use message verifier in cookies. Previous implementation allowed brute force attacks by cookies. Even though it is impossible for the brute force attack to succeed, the current implementation blocks the attacker even before hitting the database.	2010-03-31 13:31:45 +02:00
models	Use message verifier in cookies. Previous implementation allowed brute force attacks by cookies. Even though it is impossible for the brute force attack to succeed, the current implementation blocks the attacker even before hitting the database.	2010-03-31 13:31:45 +02:00
orm	Small cleanup.	2010-03-30 00:29:57 +02:00
rails	Use message verifier in cookies. Previous implementation allowed brute force attacks by cookies. Even though it is impossible for the brute force attack to succeed, the current implementation blocks the attacker even before hitting the database.	2010-03-31 13:31:45 +02:00
strategies	Use message verifier in cookies. Previous implementation allowed brute force attacks by cookies. Even though it is impossible for the brute force attack to succeed, the current implementation blocks the attacker even before hitting the database.	2010-03-31 13:31:45 +02:00
failure_app.rb	Move http authenticatable response to failure app.	2010-03-29 15:16:14 +02:00
mapping.rb	Initial work on making the authentication stack more flexible.	2010-03-29 16:13:19 +02:00
models.rb	Create authenticatable base model and strategy.	2010-03-29 20:52:48 +02:00
modules.rb	Create authenticatable base model and strategy.	2010-03-29 20:52:48 +02:00
rails.rb	Make config.devise available on config/application.rb	2010-03-30 11:08:16 +02:00
schema.rb	Add lock_strategy.	2010-03-31 11:54:11 +02:00
test_helpers.rb	Do not depend on silence_missing_strategies! anymore. This speeds up strategies matching because we don't need to check if the model duck types to the strategy and it doesn't trigger uneeded strategies.	2010-03-28 14:55:05 +02:00
version.rb	Release pre4 with improved controller handling.	2010-03-03 12:22:04 +01:00